Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-47174
HistoryOct 31, 2023 - 4:15 a.m.

Deserialization of untrusted data

2023-10-3104:15:00
PRIOn knowledge base
www.prio-n.com
10
thorn sftp gateway
deserialization vulnerability
remote code execution
pivotal spring framework
cve-2016-1000027

AI Score

9.6

Confidence

High

EPSS

0.024

Percentile

90.1%

Thorn SFTP gateway 3.4.x before 3.4.4 uses Pivotal Spring Framework for Java deserialization of untrusted data, which is not supported by Pivotal, a related issue to CVE-2016-1000027. Also, within the specific context of Thorn SFTP gateway, this leads to remote code execution.

AI Score

9.6

Confidence

High

EPSS

0.024

Percentile

90.1%